This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6211FA3AF95211F0A5FC307BDAE4EC9C.roa
File:                     6211FA3AF95211F0A5FC307BDAE4EC9C.roa (raw, json)
Hash identifier:          nwkJPhICgVboJxOQrPnXuJfTm/OhSIe+lDpqDgVjiR0=
Subject key identifier:   23:1A:69:75:72:58:F7:A1:03:C0:CA:1B:4A:92:EE:2E:A2:4D:54:BB
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B664
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6211FA3AF95211F0A5FC307BDAE4EC9C.roa
Signing time:             Sat 24 Jan 2026 18:27:48 +0000
ROA not before:           Sat 24 Jan 2026 18:27:43 +0000
ROA not after:            Tue 03 Mar 2026 18:27:43 +0000
asID:                     62240
IP address blocks:        154.195.139.0/24 maxlen: 24
                          154.195.143.0/24 maxlen: 24
                          154.195.144.0/24 maxlen: 24
                          154.195.145.0/24 maxlen: 24
                          154.195.146.0/24 maxlen: 24
                          154.195.147.0/24 maxlen: 24
                          154.195.148.0/24 maxlen: 24
                          154.195.149.0/24 maxlen: 24
                          154.195.150.0/24 maxlen: 24
                          154.195.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112228 (0x1b664)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 24 18:27:43 2026 GMT
            Not After : Mar  3 18:27:43 2026 GMT
        Subject: CN=69750f24-366e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4a:0d:8b:26:bc:cb:3d:31:27:e4:db:ed:d2:
                    73:8c:a6:22:96:be:2f:7c:3e:16:38:10:9a:d8:be:
                    fa:3e:55:14:ef:ce:e2:0e:0e:42:27:dd:14:30:81:
                    d8:62:86:35:ae:1a:2b:e5:c4:d2:63:8c:bf:b1:b6:
                    72:55:40:cb:fd:61:60:eb:44:c5:2d:6d:ae:58:d3:
                    b9:4d:f6:f9:3f:45:e3:a1:1e:91:21:34:e8:78:48:
                    26:fd:15:1c:23:0d:29:ea:f0:cf:38:cc:ff:a0:15:
                    cb:22:a2:da:83:40:17:af:a1:e9:54:1b:03:a0:0f:
                    dc:cb:12:7d:61:d7:f7:37:ef:46:91:68:41:ef:3b:
                    8d:24:f7:d8:00:9e:14:6a:bf:5e:1f:9f:c1:44:6d:
                    3d:55:42:c9:79:fe:52:8a:c1:b1:48:a6:0d:ad:60:
                    d9:cc:5e:98:3f:8e:c4:eb:ec:3e:c8:f0:3e:dd:8b:
                    58:f9:28:17:81:73:ce:16:89:7d:66:4b:15:e2:23:
                    be:36:10:3d:c9:09:ab:e5:d1:ea:67:a4:c9:32:46:
                    cb:89:a1:d0:f8:b8:5a:55:df:ce:a4:21:b5:8d:b2:
                    fd:ad:17:63:2d:b3:95:c3:95:bc:c7:f6:bf:c0:12:
                    17:f3:d8:cd:89:71:59:00:16:e7:48:8e:ef:02:f3:
                    d2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:1A:69:75:72:58:F7:A1:03:C0:CA:1B:4A:92:EE:2E:A2:4D:54:BB
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6211FA3AF95211F0A5FC307BDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.195.139.0/24
                  154.195.143.0-154.195.151.255

    Signature Algorithm: sha256WithRSAEncryption
         c8:60:e7:12:84:32:59:16:fd:c1:ce:2a:20:06:0b:d0:df:78:
         5d:bf:99:af:7b:0e:55:f7:18:5d:61:26:4c:93:57:96:67:ea:
         8b:6d:22:75:c4:0b:93:db:0d:e1:8e:51:19:b2:e8:e6:51:79:
         a9:d1:97:75:d4:83:41:fb:6a:34:63:8c:72:49:7d:df:cf:eb:
         3a:9b:0e:e2:cb:b0:3b:6f:af:b8:a2:3e:92:8f:a6:4b:8e:e8:
         a2:33:d8:d4:d4:9d:a2:03:80:ee:c9:bb:29:d9:d9:a5:49:3c:
         52:db:97:0d:d6:a5:c0:7c:ed:0c:d6:51:09:b3:c2:04:64:f6:
         b3:18:fd:ad:dd:25:2b:9c:19:a4:77:75:9e:12:ac:12:7e:24:
         b2:5d:c1:53:e8:7e:21:de:2f:e9:2b:98:4d:f1:ee:93:5a:cc:
         4c:53:42:49:04:cb:a6:58:ff:d9:e8:1a:77:e2:fe:da:c4:45:
         00:d1:10:52:98:c0:46:b4:0b:55:6d:86:bf:7c:3a:05:9e:93:
         2d:f6:ca:4e:20:23:ff:03:6e:bc:db:e6:71:b8:ba:ab:26:13:
         03:70:1b:11:bc:81:82:70:0b:4c:e1:73:b0:94:5e:87:e9:5a:
         0e:24:aa:93:b0:ad:65:f5:c2:4b:09:c5:0d:19:1b:b2:5e:9f:
         f4:51:df:a5
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIDAbZkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMTI0MTgyNzQzWhcNMjYwMzAzMTgyNzQzWjAYMRYw
FAYDVQQDEw02OTc1MGYyNC0zNjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxUoNiya8yz0xJ+Tb7dJzjKYilr4vfD4WOBCa2L76PlUU787iDg5CJ90U
MIHYYoY1rhor5cTSY4y/sbZyVUDL/WFg60TFLW2uWNO5Tfb5P0XjoR6RITToeEgm
/RUcIw0p6vDPOMz/oBXLIqLag0AXr6HpVBsDoA/cyxJ9Ydf3N+9GkWhB7zuNJPfY
AJ4Uar9eH5/BRG09VULJef5SisGxSKYNrWDZzF6YP47E6+w+yPA+3YtY+SgXgXPO
Fol9ZksV4iO+NhA9yQmr5dHqZ6TJMkbLiaHQ+LhaVd/OpCG1jbL9rRdjLbOVw5W8
x/a/wBIX89jNiXFZABbnSI7vAvPSkQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFCMa
aXVyWPehA8DKG0qS7i6iTVS7MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82MjExRkEzQUY5NTIxMUYwQTVGQzMwN0JEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAmsOLMAwDBACaw48DBAOa
w5AwDQYJKoZIhvcNAQELBQADggEBAMhg5xKEMlkW/cHOKiAGC9DfeF2/ma97DlX3
GF1hJkyTV5Zn6ottInXEC5PbDeGOURmy6OZReanRl3XUg0H7ajRjjHJJfd/P6zqb
DuLLsDtvr7iiPpKPpkuO6KIz2NTUnaIDgO7JuynZ2aVJPFLblw3WpcB87QzWUQmz
wgRk9rMY/a3dJSucGaR3dZ4SrBJ+JLJdwVPofiHeL+krmE3x7pNazExTQkkEy6ZY
/9noGnfi/trERQDREFKYwEa0C1Vthr98OgWeky32yk4gI/8Dbrzb5nG4uqsmEwNw
GxG8gYJwC0zhc7CUXofpWg4kqpOwrWX1wksJxQ0ZG7Jen/RR36U=
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:47 2026 by rpki-client